Why not sterilise the (!N) command? this is the only one that would need modifying as its the only one that a remote attacker could use. For example in PHP there is a command that lets you stop variables being executed as variables and just shown how they are. Couldnt this be possible with MP3?
